FR
Product
FreeRDP
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch
Add FreeRDP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109951 | 5.3 | Oct 13 | FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name Affected: 3.17.1 before 3.32.0 |
| CVE-2026-109679 | 5.3 | Oct 13 | FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response Affected: 3.0.0-beta4 before 3.32.0 |
| CVE-2026-109253 | 5.3 | Oct 12 | FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read Affected: 3.9.0 before 3.32.0 |
| CVE-2026-109252 | 5.3 | Oct 12 | FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME Affected: 3.9.0 before 3.32.0 |
| CVE-2026-109251 | 5.3 | Oct 12 | FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry Affected: before 3.32.0 |
| CVE-2026-33995 | 5.3 | Mar 30 | FreeRDP: Possible double free in kerberos_AcceptSecurityContext Affected: < 3.24.2 |
| CVE-2026-26271 | 5.3 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-111376 | 5.0 | Oct 16 | FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE Affected: 3.30.0 before 3.32.0 |
| CVE-2026-109940 | 4.6 | Oct 13 | FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name Affected: 3.0.0-beta1 before 3.32.0 |
| CVE-2022-39319 | 4.6 | Nov 16 | FreeRDP is a free remote desktop protocol library and clients Affected: before 2.9.0 |
| CVE-2022-39317 | 4.6 | Nov 16 | FreeRDP is a free remote desktop protocol library and clients Affected: before 2.9.0 |
| CVE-2022-41877 | 4.6 | Nov 16 | FreeRDP is a free remote desktop protocol library and clients Affected: before 2.9.0 |
| CVE-2022-39320 | 4.6 | Nov 16 | FreeRDP is a free remote desktop protocol library and clients Affected: before 2.9.0 |
| CVE-2026-109243 | 4.4 | Oct 12 | FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File Affected: 3.0.0 before 3.32.0 |
| CVE-2026-110831 | 4.3 | Oct 14 | FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE Affected: 3.13.0 before 3.32.0 |
| CVE-2026-109950 | 4.3 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages Affected: 3.0.0 before 3.32.0 |
| CVE-2026-109948 | 4.3 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection Affected: 3.0.0 before 3.32.0 |
| CVE-2026-67303 | 4.3 | Aug 1 | FreeRDP before 3.29.0 Denial of Service via serial DeviceControl Affected: before 3.29.0 |
| CVE-2020-4032 | 4.3 | Jun 22 | In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order Affected: before 2.1.2 |
| CVE-2026-67293 | 4.2 | Aug 1 | FreeRDP before 3.29.0 Improper Certificate Hostname Validation Affected: before 3.29.0 |